Need help recovery 3Tb NTFS partition
Posted: 15 May 2013, 14:26
Hi,
I have formatted my external drive by error. It's a WD My Book 3Tb and had previously only one NTFS partition of 2.7Tb. It is now formatted with FAT32.
I have run Testdisk Analyse, quick search and deep search but cannot find my files.
What can i do ?
Thanks for your help.
Here's below the logfile of Testdisk :
Tue May 14 22:14:38 2013
Command line: TestDisk
TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.3, Cygwin 1007.7
Compilation date: 2011-11-15T08:36:54
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=159671910400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=3000557895680
filewin32_getfilesize(\\.\F:) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\F:
file_pread(4,1,buffer,312592769(19457/254/63)) lseek err Invalid argument
file_pread(5,1,buffer,732563999(45599/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - INTEL SSDSA2CW160G3, S/N:CVPR14510A7J160DGN, FW:4PC10362
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - WD My Book 1140, S/N:WMC1T1372329, FW:1019
Disk \\.\PhysicalDrive1 - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - WD My Book 1140, S/N:WMC1T1372329, FW:1019
Drive E: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - WD My Book 1140, S/N:WMC1T1372329, FW:1019
Partition table type (auto): Intel
Disk /dev/sdb - 3000 GB / 2794 GiB - WD My Book 1140
Partition table type: Intel
Analyse Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45599 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 4 5 45599 165 6 732558080
1 P HPFS - NTFS 0 4 5 45599 165 6 732558080
No partition is bootable
Computes LBA from CHS for Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45600 255 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45600 255 63
FAT32 at 0/4/5
FAT1 : 32-22399
FAT2 : 22400-44767
start_rootdir : 44768 root cluster : 2
Data : 44768-732558079
sectors : 732558080
cluster_size : 32
no_of_cluster : 22891041 (2 - 22891042)
fat_length 22368 calculated 22355
FAT32 at 0/4/5
FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
file_pread(5,1,buffer,732558337(45599/165/8)) lseek err Invalid argument
file_pread(5,1,buffer,732558338(45599/165/9)) lseek err Invalid argument
file_pread(5,2,buffer,732558343(45599/165/14)) lseek err Invalid argument
file_pread(5,2,buffer,732558345(45599/165/16)) lseek err Invalid argument
file_pread(5,3,buffer,732558351(45599/165/22)) lseek err Invalid argument
file_pread(5,1,buffer,732558592(45599/169/11)) lseek err Invalid argument
Results
* FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
interface_write()
1 * FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45600 255 63
FAT32 at 0/4/5
FAT1 : 32-22399
FAT2 : 22400-44767
start_rootdir : 44768 root cluster : 2
Data : 44768-732558079
sectors : 732558080
cluster_size : 32
no_of_cluster : 22891041 (2 - 22891042)
fat_length 22368 calculated 22355
FAT32 at 0/4/5
FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
file_pread(5,1,buffer,732558337(45599/165/8)) lseek err Invalid argument
file_pread(5,1,buffer,732558338(45599/165/9)) lseek err Invalid argument
file_pread(5,2,buffer,732558343(45599/165/14)) lseek err Invalid argument
file_pread(5,2,buffer,732558345(45599/165/16)) lseek err Invalid argument
file_pread(5,3,buffer,732558351(45599/165/22)) lseek err Invalid argument
file_pread(5,1,buffer,732558592(45599/169/11)) lseek err Invalid argument
Results
* FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
dir_partition inode=0
* FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
FAT: cluster=2(0x2), pos=45024
Directory /
3 drwxr-xr-x 0 0 0 14-May-2013 22:06 $RECYCLE.BIN
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:26 _325270_
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:26 636f3d04e33f6261e123574a
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:30 MSI2d9a7.tmp
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:30 _562641_
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:30 2c058c3f830d37e51498f6cb8d
X 162 drwxr-xr-x 0 0 131072 15-May-2013 05:30 MSI2d9bf.tmp
X 162 drwxr-xr-x 0 0 131072 15-May-2013 05:30 MSI2d9d6.tmp
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:30 MSI33fc9.tmp
interface_write()
1 * FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
I have formatted my external drive by error. It's a WD My Book 3Tb and had previously only one NTFS partition of 2.7Tb. It is now formatted with FAT32.
I have run Testdisk Analyse, quick search and deep search but cannot find my files.
What can i do ?
Thanks for your help.
Here's below the logfile of Testdisk :
Tue May 14 22:14:38 2013
Command line: TestDisk
TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.3, Cygwin 1007.7
Compilation date: 2011-11-15T08:36:54
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=159671910400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=3000557895680
filewin32_getfilesize(\\.\F:) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\F:
file_pread(4,1,buffer,312592769(19457/254/63)) lseek err Invalid argument
file_pread(5,1,buffer,732563999(45599/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - INTEL SSDSA2CW160G3, S/N:CVPR14510A7J160DGN, FW:4PC10362
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - WD My Book 1140, S/N:WMC1T1372329, FW:1019
Disk \\.\PhysicalDrive1 - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - WD My Book 1140, S/N:WMC1T1372329, FW:1019
Drive E: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - WD My Book 1140, S/N:WMC1T1372329, FW:1019
Partition table type (auto): Intel
Disk /dev/sdb - 3000 GB / 2794 GiB - WD My Book 1140
Partition table type: Intel
Analyse Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45599 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 4 5 45599 165 6 732558080
1 P HPFS - NTFS 0 4 5 45599 165 6 732558080
No partition is bootable
Computes LBA from CHS for Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45600 255 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45600 255 63
FAT32 at 0/4/5
FAT1 : 32-22399
FAT2 : 22400-44767
start_rootdir : 44768 root cluster : 2
Data : 44768-732558079
sectors : 732558080
cluster_size : 32
no_of_cluster : 22891041 (2 - 22891042)
fat_length 22368 calculated 22355
FAT32 at 0/4/5
FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
file_pread(5,1,buffer,732558337(45599/165/8)) lseek err Invalid argument
file_pread(5,1,buffer,732558338(45599/165/9)) lseek err Invalid argument
file_pread(5,2,buffer,732558343(45599/165/14)) lseek err Invalid argument
file_pread(5,2,buffer,732558345(45599/165/16)) lseek err Invalid argument
file_pread(5,3,buffer,732558351(45599/165/22)) lseek err Invalid argument
file_pread(5,1,buffer,732558592(45599/169/11)) lseek err Invalid argument
Results
* FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
interface_write()
1 * FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45600 255 63
FAT32 at 0/4/5
FAT1 : 32-22399
FAT2 : 22400-44767
start_rootdir : 44768 root cluster : 2
Data : 44768-732558079
sectors : 732558080
cluster_size : 32
no_of_cluster : 22891041 (2 - 22891042)
fat_length 22368 calculated 22355
FAT32 at 0/4/5
FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
file_pread(5,1,buffer,732558337(45599/165/8)) lseek err Invalid argument
file_pread(5,1,buffer,732558338(45599/165/9)) lseek err Invalid argument
file_pread(5,2,buffer,732558343(45599/165/14)) lseek err Invalid argument
file_pread(5,2,buffer,732558345(45599/165/16)) lseek err Invalid argument
file_pread(5,3,buffer,732558351(45599/165/22)) lseek err Invalid argument
file_pread(5,1,buffer,732558592(45599/169/11)) lseek err Invalid argument
Results
* FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
dir_partition inode=0
* FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
FAT32, 3000 GB / 2794 GiB
FAT: cluster=2(0x2), pos=45024
Directory /
3 drwxr-xr-x 0 0 0 14-May-2013 22:06 $RECYCLE.BIN
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:26 _325270_
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:26 636f3d04e33f6261e123574a
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:30 MSI2d9a7.tmp
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:30 _562641_
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:30 2c058c3f830d37e51498f6cb8d
X 162 drwxr-xr-x 0 0 131072 15-May-2013 05:30 MSI2d9bf.tmp
X 162 drwxr-xr-x 0 0 131072 15-May-2013 05:30 MSI2d9d6.tmp
X 5 drwxr-xr-x 0 0 131072 15-May-2013 05:30 MSI33fc9.tmp
interface_write()
1 * FAT32 LBA 0 4 5 45599 165 6 732558080 [New Volume]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.